Description
openSIS-Classic 是 OS4ED 开发的开源学生信息系统，提供学生管理、成绩管理、出勤追踪、课程排课等核心功能模块，广泛应用于K-12教育机构。openSIS-Classic /ResetUserInfo.php 存在SQL注入漏洞，攻击者可获取数据库敏感信息。
openSIS-Classic /ResetUserInfo.php SQL 注入漏洞（CVE-2024-51211）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-51211
https://github.com/advisories/GHSA-cmj4-q56c-v7p7
https://www.nsfocus.net/vulndb/107725
https://cve.imfht.com/detail/CVE-2024-51211
https://access.redhat.com/security/cve/cve-2024-51211
https://cert.kenet.or.ke/cve-2024-51211-os4ed-opensis-classic-sql-injection
https://www.exploit-db.com/exploits/52080